Remove $FreeBSD$: one-line sh pattern

Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/

spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSD

The SPDX folks have obsoleted the BSD-2-Clause-FreeBSD identifier. Catch
up to that fact and revert to their recommended match of

spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSD

The SPDX folks have obsoleted the BSD-2-Clause-FreeBSD identifier. Catch
up to that fact and revert to their recommended match of BSD-2-Clause.

Discussed with: pfg
MFC After: 3 days
Sponsored by: Netflix

show more ...

local-unbound-setup: Disable the libc subscriber.

This is the correct way to prevent resolvconf from updating resolv.conf.

Reviewed by: cy
Differential Revision: https://reviews.freebsd.org/D39262

local-unbound-setup: Use default root certificates

Don't force /etc/ssl/cert.pem. It does not exist by default, only if
security/ca_root_nss is installed. Just use the default OpenSSL search
locat

local-unbound-setup: Use default root certificates

Don't force /etc/ssl/cert.pem. It does not exist by default, only if
security/ca_root_nss is installed. Just use the default OpenSSL search
locations which are /etc/ssl/cert.pem and /etc/ssl/certs/.

The tls-system-cert option was added in Unbound 1.16.0.

Reviewed by: zlei
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D38243

show more ...

Fix local-unbound setup for some IPv6 deployments.

PR: 250984
MFC after: 1 week

Merge ^/head r340918 through r341763.

Check that /etc/resolv.conf exists before trying to read it.
Fix whitespace nit introduced in previous commit.

MFC after: 1 week

Merge ^/head r339015 through r339669.

Add support for DNS-over-TLS to the local_unbound service.

Approved by: re (kib)

If the sole non-option command line argument is "none", remove any
pre-existing forwarder configuration and set Unbound up to recurse.

PR: 222902
MFC after: 1 week

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902